home

fortoresse hitler.exe

The executable fortoresse hitler.exe has been detected as malware by 12 anti-virus scanners. This is a setup program which is used to install the application. The file has been seen being downloaded from fs13n1.sendspace.com and multiple other hosts.
MD5:
a8a9b6317abcae08ab9cd951a0ea0780

SHA-1:
5c76417f04da9948c3fd99603be9df54b8a002d3

SHA-256:
b66e345cae617a1ae93e3ac4696d9623400b1df3ccc6842e7dd8a19b7b3c94b3

Scanner detections:
12 / 68

Status:
Malware

Analysis date:
11/27/2024 2:02:00 AM UTC  (today)

Scan engine
Detection
Engine version

Agnitum Outpost
HackTool.CheatEngine
7.1.1

Baidu Antivirus
HackTool.Win32.CheatEngine
4.0.3.15315

ESET NOD32
Win32/HackTool.CheatEngine.AF potentially unsafe (variant)
9.11264

Fortinet FortiGate
Riskware/CheatEngine
3/15/2015

F-Prot
W32/CheatEngine.B
v6.4.7.1.166

Malwarebytes
Hacktool.CheatEngine
v2015.03.15.12

McAfee
Artemis!A8A9B6317ABC
5600.6825

Norman
Troj_Generic.YNTPH
11.20150315

Sophos
Generic PUA FM
4.98

Trend Micro House Call
TROJ_GEN.R002C0EBC15
7.2.74

Trend Micro
TROJ_GEN.R002C0EBC15
10.465.15

VIPRE Antivirus
Trojan.Win32.Generic
38102

File size:
3.9 MB (4,065,792 bytes)

File type:
Executable application (Win32 EXE)

File PE Metadata
Compilation timestamp:
6/28/2013 11:45:44 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
98304:sdiGkbG3s4iAVwYa7XZaE0NFO4ao/7k+hc3OIU:+iZG3PiAVwYCajFi3nU

Entry address:
0x15EB

Entry point:
E8, 1C, 1B, 00, 00, E9, 78, FE, FF, FF, 8B, FF, 55, 8B, EC, 51, 56, 8B, 75, 0C, 56, E8, AC, 27, 00, 00, 89, 45, 0C, 8B, 46, 0C, 59, A8, 82, 75, 17, E8, 6A, 03, 00, 00, C7, 00, 09, 00, 00, 00, 83, 4E, 0C, 20, 83, C8, FF, E9, 2F, 01, 00, 00, A8, 40, 74, 0D, E8, 4F, 03, 00, 00, C7, 00, 22, 00, 00, 00, EB, E3, 53, 33, DB, A8, 01, 74, 16, 89, 5E, 04, A8, 10, 0F, 84, 87, 00, 00, 00, 8B, 4E, 08, 83, E0, FE, 89, 0E, 89, 46, 0C, 8B, 46, 0C, 83, E0, EF, 83, C8, 02, 89, 46, 0C, 89, 5E, 04, 89, 5D, FC, A9, 0C, 01, 00...
 
[+]

Code size:
35.5 KB (36,352 bytes)

The file fortoresse hitler.exe has been seen being distributed by the following 9 URLs.

https://fs13n1.sendspace.com/dl/49d2ef8c175fbda665caaa241581af4a/56e70f7d69ed2d1e/.../Fortoresse Hitler.EXE

https://fs13n3.sendspace.com/dl/b5ced9d3e1c29bc66b4e85ad4849d8f3/5837203f54d69d44/.../Fortoresse Hitler.EXE

https://fs13n1.sendspace.com/dl/8a77be0c42c453c6bcbf3cbdd0ea3cb1/57bf08902aae6e2a/.../Fortoresse Hitler.EXE

https://fs12n2.sendspace.com/dl/f7f28dc1532322fff951a30eb35f22c9/5546962d5ac2a89b/.../Fortoresse Hitler.EXE

https://fs13n1.sendspace.com/dl/868025d6d96261e42d7f47f9dabe5a4a/576feefc76bdb9b5/.../Fortoresse Hitler.EXE

https://fs13n3.sendspace.com/dl/e71086f1efe5bf9e0c6d1512722b0bb0/572e79455cc89570/.../Fortoresse Hitler.EXE

https://fs13n4.sendspace.com/dl/8a0611c65d156a83eb565440993c8fad/56d62989764a677a/.../Fortoresse Hitler.EXE

https://fs13n1.sendspace.com/dl/a775ab8b5fc5118f07b5f0bf4ac5f946/56702c9a6c7abe51/.../Fortoresse Hitler.EXE

http://download1430.mediafire.com/i8rc7raj5rqg/.../Fortoresse Hitler.EXE

Remove fortoresse hitler.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.